Privacy & Support

Last updated 2 December 2020.

Kaomoji.moe is a passion project that I (Jack) work on for fun and learning in my spare time that is not intended to make a profit but that doesn’t mean I can’t make sure it adheres to good privacy practices. I will do everything I can to make sure that only the bare minimum amount of data to provide Kaomoji.moe to you is stored.

Condition of installation

By adding Kaomoji.moe to your Slack Team, you acknowledge that it does not have control over what your Slack Team members send to the /kaomoji or /kaomojis Slash Commands and you agree to the privacy policy information on this page. Kaomoji.moe is an automated service that retreives content from a very large dataset using an imperfect search and natural language processing algorithm that may or may not improve over time.

Support

If you have any concerns or questions about the Kaomoji.moe service please contact me at support [at] kaomoji.moe.

Data collection & storage

Kaomoji.moe does not collect personally identifiable information such as email addresses or real names. The following data is provided to Kaomoji.moe automatically via the Slack API, encrypted at rest, encrypted in transit, and only accessible from a single account that uses 2FA and a strong generated password within Google Cloud Platform:

  • Slack User ID (e.g. U1234567)
  • Slack Team ID (e.g. T1234567)
  • Slack User token (e.g. xoxp-00000-00000)
  • Slack Bot token (e.g. xoxb-00000-00000)
  • Slack Team name (e.g. The Fort)

In addition to the Slack API provided data, Kaomoji.moe also stores the following:

  • Which feedback button was clicked
  • The text sent with the /kaomoji if a feedback button was clicked
  • Which kaomoji was sent if a feedback button was clicked
  • The total number of kaomojis the Slack Team has sent

Data usage

I believe that everyone has the right to retain their privacy both online and offline which means that I will never share any Kaomoji.moe data with any 3rd party service or entity unless I am required to do so by law.

Team and User ID

The Slack Team and User ID information that was provided to Kaomoji.moe via the Slack API upon installation is used to verify that commands sent from your Slack Team are genuine and the Kaomoji.moe app has been installed correctly for each member of your team.

Slack User token

This token is required for Kaomoji.moe to work. It is sent along with every request to the Slack API, which may be a result of; a Slash Command, loading the Account page, clicking a feedback button, or deleting your own account.

This token is never exposed to the user or the web app at any time.

Slack Bot token

This token is required for Kaomoji.moe to work. It is used to send messages as the bot or uninstall the app from your Slack Team and revoke active tokens.

This token is never exposed to the user or the web app at any time.

Team names

I may use Slack Team names on marketing materials for the Kaomoji.moe website or associated social media accounts. Permission to use this information will be acquired before any materials are generated.

Slash Command text

Text sent to the /kaomoji command is stored only when the feedback prompts are clicked. This data is either:

  1. Automatically ingested back into the system if the feedback was "correct"
  2. Checked periodically by me if the feedback was not "correct"
  3. Deleted automatically at the end of every month

Delete my stored data

In the event that you’d like to completely remove the above stored information from the Kaomoji.moe database there are buttons in your account page that allow you to delete your own account or delete your entire Slack Team and uninstall the app.

When an account is deleted the token(s) related to that account or Slack Team are revoked via Slack so they cannot be used again.

Feedback records that include the text sent to a /kaomoji command are retained but they are not related in any way to Team or User IDs. This information is periodically purged once they have been processed on a monthly basis anyway.

Slack App permissions

For information about how Slack handles permissions, please see their documentation on Scopes and permissions. Kaomoji.moe requires the following permission scopes:

identity.basic & identity.avatar

This allows the Account page to show your name and your Slack avatar. This information is not stored, only requested on-demand.

identity.team

This allows the Account page to show your Slack Team name.

commands

This is a simple one, it allows the app to add the /kaomoji commands to your team!

chat:write

This permission allows Kaomoji.moe to send a message on behalf of a user after they’ve executed a /kaomoji command. While this might sound a bit scary, it allows for an uninterrupted flow of conversation by sending kaomojis as if they were typed by the user themselves. Kaomoji.moe never uses this permission to send messages without the user first requesting a kaomoji via the /kaomoji or /kaomojis Slash Command.